diff --git a/container-selinux.tgz b/container-selinux.tgz index 467dbd3..9cf64b2 100644 Binary files a/container-selinux.tgz and b/container-selinux.tgz differ diff --git a/policy-f25-contrib.patch b/policy-f25-contrib.patch index 22390c1..afe67f7 100644 --- a/policy-f25-contrib.patch +++ b/policy-f25-contrib.patch @@ -109345,10 +109345,10 @@ index 0000000..46f12a4 +') diff --git a/tlp.te b/tlp.te new file mode 100644 -index 0000000..8a5f47b +index 0000000..0183c55 --- /dev/null +++ b/tlp.te -@@ -0,0 +1,64 @@ +@@ -0,0 +1,65 @@ +policy_module(tlp, 1.0.0) + +######################################## @@ -109377,6 +109377,7 @@ index 0000000..8a5f47b +allow tlp_t self:unix_stream_socket create_stream_socket_perms; +allow tlp_t self:udp_socket create_socket_perms; +allow tlp_t self:unix_dgram_socket create_socket_perms; ++allow tlp_t self:netlink_generic_socket create_socket_perms; + +manage_dirs_pattern(tlp_t, tlp_var_run_t, tlp_var_run_t) +manage_files_pattern(tlp_t, tlp_var_run_t, tlp_var_run_t) diff --git a/selinux-policy.spec b/selinux-policy.spec index 8fd3902..32fc9d6 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -19,7 +19,7 @@ Summary: SELinux policy configuration Name: selinux-policy Version: 3.13.1 -Release: 225.4%{?dist} +Release: 225.5%{?dist} License: GPLv2+ Group: System Environment/Base Source: serefpolicy-%{version}.tgz @@ -675,6 +675,9 @@ exit 0 %endif %changelog +* Sun Jan 08 2017 Lukas Vrabec - 3.13.1-225.5 +- Allow tlp_t domain creating netlink_generic sockets. BZ(1403462) + * Sun Jan 08 2017 Lukas Vrabec - 3.13.1-225.4 - Fix broken interfaces - Add tlp_var_lib_t label for /var/lib/tlp directory BZ(1409977)